7.5
CVSSv3

CVE-2019-12295

Published: 23/05/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

It exists that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malformed packets onto the wire or convincing someone to read a malformed packet trace file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark

debian debian linux 9.0

canonical ubuntu linux 18.04

canonical ubuntu linux 19.04

canonical ubuntu linux 16.04

f5 big-ip access policy manager

f5 big-ip advanced firewall manager

f5 big-ip edge gateway

f5 big-ip fraud protection service

f5 big-ip analytics

f5 big-ip application acceleration manager

f5 big-ip application security manager

f5 big-ip domain name system

f5 big-ip global traffic manager

f5 big-ip link controller

f5 big-ip local traffic manager

f5 big-ip policy enforcement manager

f5 big-ip webaccelerator

f5 big-ip application acceleration manager 15.1.0

f5 big-ip local traffic manager 15.1.0

f5 big-ip advanced firewall manager 15.1.0

f5 big-ip policy enforcement manager 15.1.0

f5 big-ip link controller 15.1.0

f5 big-ip global traffic manager 15.1.0

f5 big-ip fraud protection service 15.1.0

f5 big-ip domain name system 15.1.0

f5 big-ip application security manager 15.1.0

f5 big-ip access policy manager 15.1.0

f5 big-ip analytics 15.1.0

f5 big-ip webaccelerator 15.1.0

f5 big-ip edge gateway 15.1.0

Vendor Advisories

Debian Bug report logs - #929446 wireshark: CVE-2019-12295 Package: src:wireshark; Maintainer for src:wireshark is Balint Reczey <rbalint@ubuntucom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 23 May 2019 18:00:02 UTC Severity: grave Tags: security, upstream Found in versions wireshark/268-1 ...
Wireshark could be made to crash if it received specially crafted network traffic or input files ...